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REMARKS 

Reconsideration and allowance of the subject patent application arc respectfully 
requested. 

Claims 1, 2, 4,j7, 8 10, 13 and 14 were rejected under 35 U.S.C. Section 102(e) as 
allegedly being anticipated by OpenGroup (httpV/opengroup.or^security/sso). For the reasons 
set forth below, Applicants traverse this rejection. 

Each of the independent claims 1, 7 and 13 calls for automatically generating mirror 
persons from an LDAIf user account entry and maintaining the mirror persons within a plurality 
of resources to identify the user across the resources. As described in connection with an 
illustrative, non-umiting example implementation in the subject patent application, multiple 
mirror persons may be generated, U., one for each resource. In this way, a user may, for 
example, use the same usemame and password to identify himself/herself across multiple 
resources. This reducej* confusion among users resulting from multiple user names/passwords. 
In addition, the maintenance and updating of "persons" in the resources is eased. 

OpenGroup disposes a single sign-on system that purports to address the "need to co- 
ordinate and where possible integrate user sign-on functions and user account management 
functions for the multitude of of different domains now found within an enterprise." 
OpenGroup, page 2 of i. As further described: 

In the single sigfon approach the system is required to collect from the user as 
part of the primary sign-on, all the identification information and user credential 
mforma&on necessary to support the authentication of the user to each of the 
secondary domams that the user may potentially require to interact with The 
information supplied by the user is used by the Single Sign-On Service within the 
primary domain ,to support the authentication of the end user to each of the 

Z^sT^l ?rf 3 WMCh U5ef aCtUaUy reqUeStS t0 ^Group, 
The Figure on pjjge 2 of 3 suggests that the user signs on to the primary domain and can 
then access a secondary domain sign-on via primary domain shell. As discussed in the 
OpenGroup excerpt aboje, the information supplied by the user in signing on to the primary 
domain can be used by tjie sign-on service within the primary domain to support authentication 
of the user to the accessed secondary domain. 
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OpenGroup does not describe that mirror persons arc used for this single sign-on 
capability and thus does not disclose or suggest generating mirror persons and maintaining these 
mirror persons within :a plurality of resources to identify the user across the resources as claimed. 
As described in connection with an illustative example embodiment in the present application, 
the mirror persons arejgenerated when an user account entry is created and thereafter maintained 
m the resources. If a tjser requests to access a resource, the mirror person within that resource 
will determine whethej: he or she has the right to access this resource and what level of the 
resource he or she can laccess. Paragraph [0024]. In contrast, OpenGroup describes that a sign- 
on service within the primary domain must be used to authenticate the user to the secondary 
domains (resources), }here is no disclosure or suggestion of providing mirror persons within the 
secondary domains forjidenufyxng a user as claimed. Instead, in OpenGrtmp, authentication 
must be made with reference to a service within the primary domain. 

For at least thislreason, OpenGroup does not anticipate claims 1, 2, 4, 7, 8 10, 13 and 14. 

Claims 5, 11 and 15 were rejected under 35 U.S.C. Section 103(a) as allegedly being 
"obvious- over OpenGijoup in view of "what is well-known in the art." Hese claims depend 
respectively from claimf 1, 7 and 13. While not acquiescing in the characterizations in the office 
action, OpenGroup woujd still be deficient with respect to these dependent claims even assuming 
(for the sake of argument only) that the allegations in the office action with respect to the features of 
claims 5,11 and 15 were proper. 

Claims 3, 6, 9 and 12 were rejected under 35 U.S.C. Section 103(a) as allegedly being 
"obvious" over OpenGroup in view of Win et al. Here again, even assuming the database and 
Internet features of Winj et al. were incorporated into OpenGroup, Win et al. is admittedly 
deficient with respect toj the features of claims 1 and 7 from which claims 3, 6, 9 and 12 depend. 

New claims 19-2p have been added. The subject matter of these claims is fully supported 
by the original disclosure| and no new matter has been added. See, e. g., paragraph [0024] and Figure 
6. These claims are believed to be allowable because of their dependency from claims 1 and 7 and 
because of the additionaljpatentable features contained therein. 
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The pending claims are believed to be allowable and favorable office action is 
respectfully requested 

Respectfully submitted, 
NIXON & VANDERHYE P.C. 
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